mirror of
https://github.com/LBPUnion/ProjectLighthouse.git
synced 2025-07-28 16:08:38 +00:00
Fix more koko suggestions
This commit is contained in:
parent
40a4d5e239
commit
0d3e1391ed
3 changed files with 19 additions and 19 deletions
|
@ -35,18 +35,18 @@ public class ResourcesController : ControllerBase
|
|||
}
|
||||
|
||||
[HttpGet("r/{hash}")]
|
||||
public Task<IActionResult> GetResource(string hash)
|
||||
public IActionResult GetResource(string hash)
|
||||
{
|
||||
string path = FileHelper.GetResourcePath(hash);
|
||||
|
||||
string fullPath = Path.GetFullPath(path);
|
||||
|
||||
// Prevent directory traversal attacks
|
||||
if (!fullPath.StartsWith(FileHelper.FullResourcePath)) return Task.FromResult<IActionResult>(this.BadRequest());
|
||||
if (!fullPath.StartsWith(FileHelper.FullResourcePath)) return this.BadRequest();
|
||||
|
||||
if (FileHelper.ResourceExists(hash)) return Task.FromResult<IActionResult>(this.File(IOFile.OpenRead(path), "application/octet-stream"));
|
||||
if (FileHelper.ResourceExists(hash)) return this.File(IOFile.OpenRead(path), "application/octet-stream");
|
||||
|
||||
return Task.FromResult<IActionResult>(this.NotFound());
|
||||
return this.NotFound();
|
||||
}
|
||||
|
||||
[HttpPost("upload/{hash}/unattributed")]
|
||||
|
|
|
@ -6,21 +6,21 @@ namespace LBPUnion.ProjectLighthouse.Configuration;
|
|||
|
||||
public class EmailEnforcementConfiguration : ConfigurationBase<EmailEnforcementConfiguration>
|
||||
{
|
||||
public override int ConfigVersion { get; set; } = 4;
|
||||
public override int ConfigVersion { get; set; } = 1;
|
||||
|
||||
public override string ConfigName { get; set; } = "enforce-email.yml";
|
||||
|
||||
public override bool NeedsConfiguration { get; set; } = false;
|
||||
|
||||
public bool EnableEmailEnforcement => false;
|
||||
public bool EnableEmailBlacklist => false;
|
||||
public bool EnableEmailEnforcement { get; set; } = false;
|
||||
public bool EnableEmailBlacklist { get; set; } = false;
|
||||
|
||||
// No blacklist by default, add path to blacklist
|
||||
public string BlacklistFilePath => "";
|
||||
public string BlacklistFilePath { get; set; } = "";
|
||||
|
||||
// Endpoints to be blocked
|
||||
// This is kind of a random list so some may need to be added or removed
|
||||
public HashSet<string> BlockedEndpoints => new()
|
||||
public HashSet<string> BlockedEndpoints { get; set; } = new()
|
||||
{
|
||||
// Comments
|
||||
"rateUserComment",
|
||||
|
|
|
@ -89,17 +89,17 @@ public static class SMTPHelper
|
|||
return false;
|
||||
|
||||
// Don't even bother if there are no domains in blacklist (AKA file path is empty/invalid, or file itself is empty)
|
||||
if (ServerConfiguration.Instance.EmailEnforcement.EnableEmailBlacklist && blacklistedDomains.Count > 0)
|
||||
{
|
||||
// Get domain by splitting at '@' character
|
||||
string domain = email.Split('@')[1];
|
||||
if (!ServerConfiguration.Instance.EmailEnforcement.EnableEmailBlacklist || blacklistedDomains.Count <= 0)
|
||||
return true;
|
||||
|
||||
// Get domain by splitting at '@' character
|
||||
string domain = email.Split('@')[1];
|
||||
|
||||
// Return false if domain is found in blacklist
|
||||
if (blacklistedDomains.Contains(domain))
|
||||
{
|
||||
Logger.Info($"Invalid email address {email} submitted by user.", LogArea.Email);
|
||||
return false;
|
||||
}
|
||||
// Return false if domain is found in blacklist
|
||||
if (blacklistedDomains.Contains(domain))
|
||||
{
|
||||
Logger.Info($"Invalid email address {email} submitted by user.", LogArea.Email);
|
||||
return false;
|
||||
}
|
||||
|
||||
return true;
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue